CVE-2020-6142

2020-09-0121:15:13

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.

CPENameOperatorVersion
opensis-classiceq7.1
opensis-classiceqVer7.0Prod
opensis-classiceqVer7.0Prod_update
opensis-classiceqVer7.0beta1
opensis-classiceq7.3
opensis-classiceqer7.1
opensis-classiceq7.2

Name	Operator	Version
opensis-classic	eq	7.1
opensis-classic	eq	Ver7.0Prod
opensis-classic	eq	Ver7.0Prod_update
opensis-classic	eq	Ver7.0beta1
opensis-classic	eq	7.3
opensis-classic	eq	er7.1
opensis-classic	eq	7.2